Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/05de5e65-ddc1-3b24-a910-b6b58936e060.roa
File: 05de5e65-ddc1-3b24-a910-b6b58936e060.roa (raw, json)
Hash identifier: Xuu57mhzWRtL9JYn2azNYQZdFCjG+/RLGjx/kLxumpQ=
Subject key identifier: F3:09:AF:6D:ED:AF:68:2B:7C:2D:FC:6B:0A:49:53:9C:74:6E:75:33
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DFA1EF816216D1025E6427180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/05de5e65-ddc1-3b24-a910-b6b58936e060.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.220.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:fa:1e:f8:16:21:6d:10:25:e6:42:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=f91a9e8d-b969-4d7a-8bc9-72368380ea3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3b:4b:fe:f7:9a:56:fe:14:4c:fb:9c:1a:64:
62:45:72:ea:e9:94:24:9c:2c:82:15:fa:ac:44:78:
34:1d:67:e1:9b:be:a6:bc:6c:8e:1a:9c:c1:c8:fa:
16:f6:a2:ba:36:0d:69:ef:39:dd:71:85:df:a2:14:
1d:9d:7c:f5:3e:eb:4a:72:f5:36:72:24:44:b8:39:
53:2b:32:0a:6e:aa:04:aa:ce:b0:d6:6c:3f:c5:49:
67:7b:cd:f3:60:a3:51:cc:e8:9a:4b:3b:7b:8c:35:
c7:29:a4:9b:d1:8e:bf:2a:c1:68:5f:ee:7f:8c:7b:
a8:89:99:bf:27:85:67:b6:17:41:af:ab:b3:fc:74:
d5:21:2b:b1:75:53:f8:e6:51:58:a6:90:03:7a:b7:
45:47:0c:34:f8:55:41:39:02:5a:26:ca:a3:7f:b1:
71:76:bf:c1:21:d3:4e:9d:94:ad:ce:0b:47:7f:cb:
25:b9:20:a4:ab:c4:7a:2d:87:5f:c7:e9:5c:72:0f:
ca:32:0b:96:03:4b:05:5e:03:6c:79:b0:23:ee:71:
02:24:e3:d8:7d:ef:2c:91:1e:f4:6e:a1:69:60:f2:
b4:c6:c6:65:9d:82:4c:96:fc:b9:89:dc:b8:a5:50:
40:ac:c4:13:59:0b:58:a8:59:bc:dc:a2:22:b0:77:
49:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:09:AF:6D:ED:AF:68:2B:7C:2D:FC:6B:0A:49:53:9C:74:6E:75:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/05de5e65-ddc1-3b24-a910-b6b58936e060.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.220.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:2f:87:f4:89:4c:32:07:d7:22:71:50:84:c1:7c:73:d8:64:
13:18:dd:46:fa:44:12:27:1e:7a:77:15:bd:ea:2e:37:1d:57:
0a:34:38:e5:c8:1f:03:03:ed:bc:e3:fe:6b:14:a6:23:80:cb:
9d:e4:d3:08:37:b9:ed:a3:b8:0e:47:b4:12:90:a3:a2:d7:c7:
ab:10:54:ae:2e:94:a4:2a:de:6c:3b:08:9b:b2:a1:58:6e:02:
6a:af:1a:d5:06:15:00:a1:16:15:43:f0:3c:5d:dd:4f:de:23:
47:62:d6:c4:e5:a4:6e:ff:b5:b3:c4:62:cc:64:ff:d9:30:15:
54:d6:38:45:ee:3c:31:8d:b2:72:3b:6d:00:f8:fb:63:90:31:
95:49:b1:c5:9e:5e:0c:a9:bc:62:71:0c:73:a3:3c:e8:95:61:
bb:fa:41:00:e4:ff:5a:21:2c:73:10:a3:33:3f:f4:50:17:ea:
a4:e5:ab:40:24:c9:9b:c7:20:16:ac:74:41:32:a1:2c:9a:62:
05:a2:14:76:39:6b:3b:36:e3:fa:6d:30:57:74:a6:97:e5:68:
56:ca:a9:69:cc:8f:18:db:5b:cd:c3:bd:2e:5e:4f:3d:72:1f:
32:82:ce:72:51:0a:e5:c7:f7:7f:08:93:f2:4a:0d:0b:10:a4:
23:cc:cb:22
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD36HvgWIW0QJeZCcYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUyMDEyMDAwMFoXDTIyMDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
ZjkxYTllOGQtYjk2OS00ZDdhLThiYzktNzIzNjgzODBlYTNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjtL/veaVv4UTPucGmRiRXLq6ZQknCyCFfqs
RHg0HWfhm76mvGyOGpzByPoW9qK6Ng1p7zndcYXfohQdnXz1PutKcvU2ciREuDlT
KzIKbqoEqs6w1mw/xUlne83zYKNRzOiaSzt7jDXHKaSb0Y6/KsFoX+5/jHuoiZm/
J4VnthdBr6uz/HTVISuxdVP45lFYppADerdFRww0+FVBOQJaJsqjf7Fxdr/BIdNO
nZStzgtHf8sluSCkq8R6LYdfx+lccg/KMguWA0sFXgNsebAj7nECJOPYfe8skR70
bqFpYPK0xsZlnYJMlvy5idy4pVBArMQTWQtYqFm83KIisHdJiQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPMJr23tr2grfC38awpJU5x0bnUzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMDVkZTVlNjUtZGRjMS0z
YjI0LWE5MTAtYjZiNTg5MzZlMDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEtwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATi+H9IlMMgfXInFQhMF8c9hkExjdRvpEEiceencVveouNx1XCjQ45cgf
AwPtvOP+axSmI4DLneTTCDe57aO4Dke0EpCjotfHqxBUri6UpCrebDsIm7KhWG4C
aq8a1QYVAKEWFUPwPF3dT94jR2LWxOWkbv+1s8RizGT/2TAVVNY4Re48MY2ycjtt
APj7Y5AxlUmxxZ5eDKm8YnEMc6M86JVhu/pBAOT/WiEscxCjMz/0UBfqpOWrQCTJ
m8cgFqx0QTKhLJpiBaIUdjlrOzbj+m0wV3Sml+VoVsqpacyPGNtbzcO9Ll5PPXIf
MoLOclEK5cf3fwiT8koNCxCkI8zLIg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:56:31 2025 by rpki-client